TMA-AIX-4.3.3.1

Ensure autoconf6 is not in use

SrednjaNivo 1Automatskaaix

Opis

This entry starts autoconf6 on system startup. This is to automatically configure IPv6 interfaces at boot time. autoconf6 is used to automatically configure IPv6 interfaces at boot time. Running this service may allow other hosts on the same physical subnet to connect via IPv6, even when the network does not support it. Audit: the autoconf6 start line in /etc/rc.tcpip must be commented out and the autoconf6 subsystem must not be active.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/autoconf6([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s autoconf6 | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

In /etc/rc.tcpip, comment out the autoconf6 entry: chrctcp -d autoconf6

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixhardening
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.3.1 Ensure autoconf6 is not in use

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix